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Abstract 

We prove a conjecture that classifies exceptional numbers. This conjecture arises 
in two different ways, from cryptography and from coding theory. An odd integer 
t > 3 is said to be exceptional if f(x) = x is APN (Almost Perfect Nonlinear) over 
for infinitely many values of n. Equivalently, t is exceptional if the binary cyclic 
code of length 2 n — 1 with two zeros a;, a;* has minimum distance 5 for infinitely 
many values of n. The conjecture we prove states that every exceptional number 
has the form T + 1 or 4* - T + 1. 
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1 Introduction 



The sequence of numbers of the form 2 l + 1 or 4* — 2 l + 1 (where % > 1) is 

3, 5, 9, 13, 17, 33, 57, 65, 129, 241, 257, 513, 993, 1025, .... 

This is sequence number A064386 in the On-Line Encyclopedia of Integer 
Sequences. It has been known for almost 40 years that these numbers are ex- 
ceptional numbers, in the sense we will define shortly. No further exceptional 
numbers were found, and it was conjectured that this sequence is the com- 
plete list of exceptional numbers. In this article we complete the proof of this 
conjecture. Somewhat surprisingly, the sequence of exceptional numbers arises 
in two different contexts, as explained in the excellent survey article of Dillon 
[2]. We now proceed to give these two different motivations for the conjecture. 



1.1 Coding theory 



We fix our base field F2. Let tobea primitive (2 n — l)-th root of unity in an 
extension of F 2 , i.e., a primitive element of F 2 ™. For every odd t > 3, we define 
C* as the cyclic code over F 2 of length 2 n — 1 with two zeros w, u>*. It is well 
known that if t = 3, the code has minimum distance 5 for every n > 3. This 
code is called the 2-error-correcting BCH code. We want to find other values 
of t (fixed with respect to n) for which the code C l n has minimum distance 
5 for infinitely many values of n. Those values of t having this property are 
called exceptional. The only known exceptional values for t are numbers of 
the form t = 2 % + 1 (known in the field of coding theory as Gold numbers) and 
t = 4 l — 2 l + l (known as Kasami- Welch numbers). We give more on the precise 
history in Section [2~T1 The conjecture stated by Janwa-McGuire- Wilson [5] is 



Conjecture 1: The only exceptional values for t are the Gold and Kasami- 
Welch numbers. 

Equivalently, the conjecture says that for a fixed odd t > 3, t 7^ 2 l + 1 or 
t ^ 4 l — 2 l + 1, the codes C l n of length 2 n — 1 have codewords of weight 4 for 
all but for finitely many values of n. In this paper we prove Conjecture 1. 
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1.2 Cryptography 

The second approach to this problem comes from cryptography. One of the 
desired properties for an S-box used in a block cipher is to have the best pos- 
sible resistance against differential attacks, i.e., any given plaintext difference 
a = y — x provides a ciphertext difference f(y) — f(x) = b with small prob- 
ability. More formally, a function / : F 2 n — > F2™ is said to be APN (Almost 
Perfect Nonlinear) if for every a, b 6 F2™ with a 7^ we have 

%{xe¥ 2n I f(x+a)+f(x) = b}<2. 

Over a field of characteristic 2, APN functions provide optimal resistance to 
differential crypt analysis. 

Monomial functions f(x) = x l from F 2 « — ► F 2 n are often considered for use 
in applications. The exponent t is called exceptional if f(x) = x l is APN on 
infinitely many extension fields of F 2 . The conjecture stated by Dillon [2] is 



Conjecture 2: The only exceptional exponents are the Gold and Kasami- 
Welch numbers. 



Of course, Dillon knew that Conjecture 2 is the same as Conjecture 1, as we 
explain below. Conjecture 2 says that for a fixed odd t > 3, t 7^ 2* + 1 or 
t 7^ 4* — 2* + 1, the function f(x) = x t is APN on at most a finite number of 
fields ¥ 2 «. In this paper we prove Conjecture 2. 



1 . 3 Summary of Paper 

In Section 2 we will explain why Conjecture 1 and Conjecture 2 are the same. 
Section 3 gives some known results and some background theory that we will 
need. The proof naturally splits into two cases. We use the notation t = 2 l £+l, 
where i > 1, and £ > 3 is odd. The two cases are dependent on the value of 
gcd(£, 2* — 1). In Section 4 we recall a result of Jedlicka, which proves the result 
in the case gcd(£, 2 l — 1) < £. In Section 5 we give a proof of the main theorem 
of this paper, Theorem [T6l which proves the case gcd(£, 2 l — 1) = £. In Section 
6 we give a counterexample to Conjecture 3 (stated below). 
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2 Background 



This proofs in this paper concern the absolute irreducibility of certain poly- 
nomials. In this section we will outline how these polynomials arise from Con- 
jectures 1 and 2. 



2.1 Coding Theory 



It is well known that codewords of weight 4 in C l n are equivalent to the poly- 
nomial 

f t (x,y,z)=x t + y t + z t + (x + y + z) t (1) 

having a rational point (a, (3, 7) over F 2 « with distinct coordinates. Notice 
that x + y, x + z and y + z divide f t (x, y, z), so we may restrict ourselves to 
rational points of the homogeneous polynomial 

g / x y Z )= ffaVl*) ( 2 ) 

* ' ' (x + y){x + z)(y + z)' 

Janwa- Wilson [5] provide the following result using the Weil bound. 

Proposition 1 If g t (x,y,z) has an absolutely irreducible factor defined over 
¥ 2 then g t (x,y,z) has rational points (a,/3, 7) G (F 2 n) 3 with distinct coordi- 
nates for all n sufficiently large. 

The following conjecture was proposed by Janwa-McGuire- Wilson. 



Conjecture 3: The polynomial gt{x, y, z) is absolutely irreducible for all t not 
of the form 2 i + 1 or A i - 2 i + 1. 



We give a counterexample (found with MAGMA) to Conjecture 3 in Section 
6. A slightly weaker form of Conjecture 3 is: 



Conjecture 3': The polynomial gt(x,y, z) has an absolutely irreducible factor 
defined over ¥2 for all t not of the form 2* + 1 or 4* — 2 l + 1 . 



By Proposition [T] and the discussion above, it is clear that Conjecture 3 =^> 
Conjecture 3' Conjecture 1. In this paper we will prove Conjecture 3', and 
as a result, we prove Conjecture 1. 
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Notice that gt(x,y,z) has no singular points at the infinity, thus the latter 
conjecture may be reformulated using g t (x, y, 1) instead of gt(x, y, z). We write 
ft(x,y) for f t (x,y, 1), and we write g t (x,y) for g t (x,y, 1). 

For the known exceptional values of t, that is, when t has the form 2 l + 1 or 
4* — 2 % + 1, the polynomial g t (x,y) is known to not be absolutely irreducible, 
and the factorization is described in [6]. We also remark that for some values 
of t, such as t = 7, gt(x, y) is nonsingular and therefore absolutely irreducible, 
but it is false that gt(x,y) is nonsingular for all t not of the form 2* + 1 or 
4* - 2* + 1. 



Cryptography 



It is well known that 

(x + !)* + £* + (y + l) t + y t 



ht(x,y) 



(x + y)(x + y+ 1) 



has no rational points over F 2 n besides those with x = y and x = y + 1 if and 
only if x* is APN over F 2 ™. 

Analogous to Proposition [Q, Jedlicka [7J showed that as a consequence of the 
Weil bound we have the following result. 

Proposition 2 If h t (x,y) has an absolutely irreducible factor over ¥ 2 then 
ht(x, y) has rational points over F 2 n besides those with x = y and x = y + 1 
for all n sufficiently large. 

The following conjectures are essentially stated in [7]. 



Conjecture 4: The polynomial h t (x,y) is absolutely irreducible polynomial 
for all t not of the form 2 % + 1 or A 1 — 2 l + 1 . 



A slightly weaker version of this conjecture is: 



Conjecture 4': The polynomial h t (x,y) has an absolutely irreducible factor 
defined over F 2 for all t not of the form 2 l + 1 or 4* — 2 l + 1 . 



By Proposition [2] and the discussion above, it is clear that Conjecture 4 =^> 
Conjecture 4' Conjecture 2. In this paper we will prove Conjecture 4', and 
as a result, we prove Conjecture 2. We give a counterexample to Conjecture 
4. 
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2.3 Putting the Problems Together 

The following is well known to researchers in the area. 

Lemma 3 Conjecture 3 is true iff Conjecture 4 is true. Conjecture 3' is true 
iff Conjecture 4' is true. 

Proof: Factoring out y* from (x + 1)* + x* + (y + 1)* + y l and letting X = 

and Y — - gives 
y to 

(x + If + x t + (y + If + y f = y^X* + Y l + 1 + (X + Y + 1)*]. 

Therefore, we can study the irreducibility of h t (x,y) or that of g t (x,y), they 
are equivalent. □ 



We can say even more: the monomial x l is an APN function over F 2 n if and 
only if the code C l n has minimum distance 5. This shows that Conjecture 1 is 
true iff Conjecture 2 is true. 



Conjecture 3 Conjecture 4 

Conjecture 3' Conjecture 4' 

Conjecture 1 ^=^> Conjecture 2 



In this paper we will prove Conjecture 3', see the table below. This is equivalent 
to proving Conjecture 4', and so implies both Conjectures 1 and 2. However, 
we give a counterexample in Section 6 that shows that Conjectures 3 and 4 
are false in general. 

Notation: Throughout we will let t — Ti + 1, where % > 1, and £ > 3 is odd. 
We use the notation Sing(g t ) to denote the set of all singular points of g t . 



The following box summarizes known results before this paper, and what is 
done in this paper. 
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Function 


Exceptional 


Constraints 


Author 




Yes 


APN iff (i, n) = 1 


Gold g] 


a ,4 i -2 i +l 


Yes 


APN iff (z, n) = 1 


van Lint- Wilson [ID]. 
Janwa- Wilson [6j 


x l 


No 


t = 3(mod 4),t > 3 


Janwa-McGuire- Wilson [5] 




No 


gcd(£, 2 i -l)<£ 


Jedlicka [7] 


X 2H+1 


No 


gcd(£, 2 i -l)=£ 


This paper 



Janwa-McGuire- Wilson proved the i — 1 case. The full proof of Conjecture 3' 
divides into two cases, according as gcd(£,2 l — 1) < £ or gcd(£,2 l — 1) = £. 
Jedlicka proved the case gcd(£, 2 % — 1) < £. In the present work we give a proof 
of Conjecture 3' in the remaining case when gcd(£, 2 l — 1) = £. We show that 
Conjecture 3 is false in general. This completes the classification of exceptional 
exponents. 



3 Singularities and Bezout's Theorem 

Consider P = (a, (3), a point in the plane. Write 

ft{x + a, y + /3) = F + F l + F 2 + F 3 + ■ ■ ■ 

where F m is homogeneous of degree m. The multiplicity of f t at P is the 
smallest m with F m ^ 0, and is denoted by mp(/ t ). In this case, F m is called 
the tangent cone. 

Recall the notation that t = 2 l i + 1, where % > 1, and I > 3 is odd. 
We let \ = a + (3 + 1, then straightforward calculations [6] give 

F = a 1 + (3 l + A* + 1 
F x = (a 1 ' 1 + \ t ~ 1 )x + (P 1 - 1 + A <-1 )y 

F 2i+a = (a t -^- 1 +A t -^- 1 )^ +1 + (^- 1 +A t -^- 1 )/ +1 + A t -^- 1 (a^y+^ 
and Fj = for 1 < j < 2 l . A point P = (a, (3) is singular if and only if 
F = Fi = 0, which happens if and only if a,j3 and A are £-th roots of unity 
(see [6j). We distinguish three types of singular point. 
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(I) a = (3 = A = 1. 

(II) Either a = 1 and (3 ^ 1, or (3 = 1 and a^l, or a = (3 ^ 1 and A = 1. 
We divide these singular points into two cases: 
(II.A) Where II holds and a, (3 E GF(2 i ) 
(II.B) Where II holds and a, (3 not both in GF^). 
(Ill) a ^ 1, (3 ^ 1 and a ^ /?. 

We divide these singular points into two cases: 

(III.A) Where III holds and a, (3 € GF{2 1 ) 

(III.B) Where III holds and a, (3 not both in GF(2 i ). 

Now we summarize some properties already known, for more details see [5]. 

Lemma 4 If F 2 i ^ then F 2 i = (Ax + By) 2 ' where A T = a 1 ' 2 ' + A 1 ^ 21 and 

The proof is obvious, because we are in characteristic 2. The importance of 
this lemma is that there is only one distinct linear factor in F 2 t . Another useful 
fact is that the opposite is true for F 2 i +1 , as shown in [5]: 

Lemma 5 F 2 i +1 has 2 l + 1 distinct linear factors. 



3. 1 Classification of Singularities 

The next step is to describe how many singularities of each type there are, 
and to find their multiplicities. 

Clearly there is only one singularity of type I. There are (£ — 1) points of type 
(1,/?) with (3 e = 1 and (3^1. So, there are also (£ — 1) of type (a, 1) and 
(£— 1) of type (a, a) with a e = 1 and a ^ 1. In total there are 3(£— 1) points 
of type II. 

For points of type III there are (£ — 1) choices for a ^ 1, and thus there are 
(£ — 2) choices for (3 with (3 ^ 1 and (3 ^ a. However, not all these choices 
lead to a valid singular point. We upper bound the number of valid choices in 
the next lemma. 

Lemma 6 For every a with a = 1 and 1 there exists a (3 with (3=1, 
(3 7^ a and (3^1 such that (a + (3 + l) e ^ 1. 

Proof: Suppose the statement is false, and fix an a ^ 1 such that for all (3 
with (3 e = 1 we also have (a + (3 + l) e = 1. Let H be {a | a e = 1}, the set of 
£-th roots of unity. Consider the map, 

(j):H^H, <j>{(3) = a + /3 + l. 
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The key point is that this map has no fixed points. For, if <p{(3) = /3, then 
a = 1, which is not true by assumption. Thus is a permutation of H which 
is a product of transpositions of the form (/3, 1 + a + (3). Therefore must 
permute an even number of points, which contradicts the fact that £ is odd. 
□ 

From this lemma if follows that, given a, there are at most (£ — 3) possible 
choices for (3. We can not guarantee that each of these is valid, so we can only 
upper bound the points of type III by < (£ — 1)(£ — 3). There are cases when 
this bound is tight. 

The next Lemma helps us determine when mp(f t ) is equal to 2 % and when it 
is 2 i + 1. 

Lemma 7 Let P = (a, (3) be a singular point of ft, then F 2 i = if and only 
if one of the following holds. 

(1) P is of Type I 

(2) P is of Type II. A 

(3) P is of Type III. A 

(4) P is of Type III.B and a/ [3 and j3/\ G GF{2 1 ). In this case, we have 
1 < gcd(£, 2 i - 1) < £. 

Proof: We have to check when a'" 2 ' + A*~ 2 ' = 0. Substituting t = Ti + 1 
in the formula we get a 1-2 ' = A 1-2 *, or a 2 * -1 = A 2 *" 1 . Now reasoning with 
^_ 2 * + xt _ T = o W e also obtain that either (3 T - 1 = A 2 * -1 . So F 2 , = if 
and only if a 2 * -1 = /J 2 * -1 = A 2 ' 1 . Consequently, F 2 i = if and only if 

(a//?) 21 - 1 = ((3/\r-\ 

If P is of Type I or II. A or III. A, then in fact a 2 '" 1 = f3 T ' 1 = A 2 '" 1 = 1. If P 
is of Type II. B then F 2 i ^ because certainly one coefficient does not vanish. 
Finally, suppose P is of Type III.B, and then we may deduce that a = C/3 
and (3 = DX for some C,D G GF{2 1 ). Raising to the £-th power yields that 
C,D are £-th roots of unity. Letting d = gcd(£,2 l — 1), then C, D are d-th 
roots of unity. Because C and D cannot be 1, we must have d > 1. If d = £ 
then all £-th roots of unity are in GF{2 % ). Because P is of Type III.B, at least 
one of a, (3 is not in GF(2 t ), so d < £. □ 

Note that if £ = 2 i - 1 then t = 2H + 1 = 4* - 2* + 1, which is an exceptional 
value. 

We now list the classification in a table. We let w(x,y) = (x + l)(y + l)(x + y) 
so that ft = wg t and mp(f t ) = mp(g t ) +mp(w) . The values of mp(w) are easy 
to work out for the various singular points P. The implications of Lemma [7] 
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can be summarized in the following tables. 



gcd(£, T - 1) = 1 



gcd(£, 2 i 



Type 


Number of Points 


mp(ft) 


mp(gt) 


I 


1 


T + 1 


T - 2 


II 


3(£-l) 


2* 


2 i - 1 


III 


<(£-!)(£ -3) 


2 i 


2 i 


the Type II points are all of Type II. B, anc 
if Type III.B. 


Type 


Number of Points 


mp(ft) 


mp(gt) 


I 


1 


2* + 1 


2 i - 2 


II 


3(£-l) 


T + 1 


2' 


III 


<{£-!){£ -3) 


T + 1 


2' + 1 


the Type II points are al 


of Type II. A, anc 



points are all of Type III. A. 



The case 1 < gcd(£, T — 1) < £ is a mixture of the previous two cases because 
ft(x,y) has points with multiplicity 2* and points with multiplicity T + 1. 
Nevertheless the upper bounds on the number of points still hold. 



3.2 Bezout's Theorem 



One of the central results in our work uses Bezout's theorem, which is a 
classical result in algebraic geometry and appears frequently in the literature 



Bezout's Theorem: Let r and s be two projective plane curves over a field 
k of degrees Di and D 2 respectively having no components in common. Then, 

J2HP,r,s) = D 1 D 2 . (3) 
p 

The sum runs over all the points P = (a, j3) G k x k, and by I(P,r,s) we 
understand the intersection multiplicity of the curves r and s at the point P. 
Notice that if r or s does not go through P, then I(P, r, s) = 0. Therefore, the 
sum in ([3]) runs over the singular points of the product rs. 

Using properties I(P, rir 2 , s) = I(P, ri, s)+I(P, r 2 , s) and deg(rir 2 ) = deg(ri) + 
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de K ( r 2 ) one can generalize Bezout's Theorem to several curves fi, / 2 , ■ ■ ■ ,fr- 
E E HP,fi,fi)= E degC/^degCf,). (4) 

P l<i<j<r l<i<i<r 

The following property of the intersection multiplicity will be useful for us. 
It is part of the definition of intersection multiplicity in |3|. We state it as a 
Corollary. 

Corollary 8 

I(P,r, s) > mp(r)mp(s), (5) 

and equality holds if and only if the tangent cones of r and s do not share any 
linear factor. 

Janwa-McGuire- Wilson [5] have computed the intersection multiplicity at points 
of type II. B assuming the curve gt(x,y) factors: 

Lemma 9 If P is a point of type II. B and g t (x,y) = r(x,y)s(x,y) then 
I(P,r,s) = 0. 



4 The Case gcd(£, 2 i - 1) < £ 

Jedlicka has proved in [7] (see Theorem 1) that g t (x,y) has an absolutely 
irreducible factor over F 2 whenever gcd(£, T — 1) < i and t is not a Gold or 
Kasami- Welch number. Therefore, if we prove the same for the case gcd(£, 2 l — 
1) = I then conjecture 3' is completely proved. This is what we do in the next 
section. 



5 Main Result: Case gcd(£, 2* - 1) = £ 

The principal starting observation when gcd(£,2 i — 1) = i is to notice that 
all £-th roots of unity lie in GF(2 l ). Therefore, all Type II singularities have 
Type II. A, and all Type III singularities have Type III. A. From Lemma or 
the table following it, we have that F 2 i = at all singular points. 

5.1 Preliminary Lemmata 

One of the main ideas involved in the proof in this section is that if gt(x,y) 
is irreducible over F 2 and splits in several factors (over an extension field), 
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then all factors have the same degree. The next lemma concerns this sort of 
phenomenon, and its proof can be found in [9] (although it is surely older). 

Lemma 10 Suppose thatp(x) G F g [xi, . . . ,x n ] is of degree t and is irreducible 
in ¥ q [xi, . . . ,x n }. There there exists r | t and an absolutely irreducible polyno- 
mial h(x) G W g r [xi, . . . , x n ] of degree - such that 

P{x) = c [] a(h(x)), 

<T£G 

where G = Gal(¥ q r/¥ q ) and c G ¥ q . Furthermore ifp(x) is homogeneous, then 
so is h(x). 

Here are some more lemmata we will use. 

Lemma 11 Given N G N the values that maximize the function 

H(xi, . . . , x n ) = J2i<i<j<n XiXj subject to the constraint x\-\ — • + x n = N are 

Xi = ■ ■ ■ = x n = N/n. 

One more technical result is recorded now, whose proof is trivial. 

Lemma 12 If i > 2 and I \ 2 l — 1 but i ^ 2* — 1 then the following results 
hold: 

(1) T- x + l-£>2. 

(2) gi+T < 4- 

Proof: Since I \ 2 l — 1 but £ ^ 2 l — 1, and both numbers are odd, we certainly 
have that £ < 2 { ~ x - 1. Then 2^ 1 - 1 - £ > so 2*' 1 + 1 - £ > 2, thus (1) 
holds. 

For (2) we have that £ < 2 i_1 - 1 < 2 i ~ 1 + 3 which implies |^ < 1 which 
certainly implies < \. □ 

5.2 A Warm-Up Case 

Theorem 13 Suppose that g t (x,y) is irreducible over F 2 and £ \ 2 l — 1 but 
£ 7^ 2 % — 1. Then gt(x, y) can not split in two factors g\ and g<± with deg(gi) = 
deg(g 2 ). 

Proof: We apply Bezout's Theorem, which states 

H 9i, 92) = deg(g 1 )deg(g 2 ). 

P£Sing(gt) 
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By Lemma [7J we know that F 2 t = 0. Since the tangent cones have different 
lines by Lemma HJ Corollary [8] tells us that the left hand side is equal to 
J2pesing( gt ) m p(.9i) m p(,92) ■ Using the table of singularities described in Section 
3 for £ | 2 l — 1 we get 

mp(g 1 )m P (g 2 ) < 

PeSing(gt) 

(2 i_1 - l) 2 + 3(£ - l)2 2i ~ 2 + {£-!){£- 3)2 i - 1 (2 i - 1 + 1). (6) 

Since the degrees of both components are the same, the right hand side of 
Bezout's Theorem is exactly, 

{2 l -H - l) 2 = 2 2i ~ 2 £ 2 - 2£2 i ' 1 + 1. (7) 

Let us compare (jTJ) and (jSJ). If © > ©, we have won, and this happens if 
and only if, 

2 2i - 2 {-£ + l) + T~ 1 {£ 2 -2£+l) <0 (8) 
which is equivalent to 

2 i - 1 {£-l)> {£ 2 -2£+ !) = {£- I) 2 . (9) 

So we conclude that the condition for ([7]) > (jSJ) is 

t- 1 >(e-i) (io) 

which is true by Lemma [T2l part (1). □ 

Remark: Notice that this proof fails when £ = 2 % — 1, as it should. 

The key idea in the previous proof is to compare (JTJ) and ([6]). In the next result 
we have a sharper bound which will be very useful for further results. 

Lemma 14 If £ | 2 i - 1 but £ ^ 2 i - 1, then 

PeSing(gt) 

Proof: Suppose not. Then, 

deg(( ?i ) 2 = (27-2) 2 

< I] m p (g t ) 2 

PGSing(gt) 

< (2 i - 2) 2 + (3£ - 3)2 2i + (£-!)(£- 3)(2 i + l) 2 
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where the last inequality is obtaining using the table of singularities described 
in section 3. After rearrangement we obtain, 

< 2 2i + £ 2 2 i+1 + £ 2 - £2 2i - A£2 i - A£ + 2 i+l + 3. 

Equivalent ly, 

< 2\2{£ - l) 2 ) - 2\£ - 1)) + {£-!){£- 3). 
Dividing by (£ — 1) we get 

2 m (2'" 1 - {£- 1)) <£-3 

or 

/ — 3 

2 i ~ 1 -(e+i) < 

y > — 2 i+1 

However, by Lemma [12] we know that the left hand side is a positive integer 
and right hand side satisfies < J^pj- < 1/4, a contradiction. □ 

Remark: Again we note that this proof fails if £ = 2 % — 1, as it should. 

5.3 Proof Assuming Irreducibility over F 2 

Next we prove Conjecture 3 under the assumption in the title. 

Theorem 15 If g t (x,y) is irreducible over ¥ 2 , and £ \ 2 % — 1 but £ ^ 2 % — 1, 
then g t (x,y) is absolutely irreducible. 

Proof: Suppose that gt(x, y) is irreducible over F 2 , and that g(x,y) — f\ ■ ■ ■ f r 
over some extension field of F 2 . By Lemma fTUl each fi has the same degree, 
which must be deg(^)/r. If r is even then by letting g\ = f\---f r /2 and 
92 = /i+r/2 " " " fr we are done by Theorem [13j We may therefore assume that 
r is odd (although our argument does not use this, and is also valid when r is 
even) . 

We apply (jlj) obtaining 

E E HP,fi,fi)= E deg^deg^). (11) 

P l<i<j<r l<i<j<r 

The sum over P is over all singular points of g t . Since the degree of fi is equal 
to the degree of fj then the right hand side is 



14 



Now we estimate the inner sum on the left hand side of (11 ip . For any P G 
Sing(g t ), since i^+i consists of 2* + 1 different lines by Lemma [5], we have 
I(P, f h fj) = m P (f i )m P (f j ) for any i, j by Corollary [SJ Therefore 

E HP,fj,fj)= E rn P U))m P U))- (13) 

l<i<j<r l<i<j<r 



We maximize (fT3T) using Lemma [TTJ We obtain the upper bound 

JC <p M/iW(/i) < Q (^) 2 = ^P( 3t ) 2 (14) 

We denote by /, II and /// the set of singular points of type I, II and III 
respectively. Then left hand side in (ITTj) is equal to 



E E i(pJ j J j )+ E E ni'frf/)- 

P€ll<i<j<r Pell l<i<j<r 

M 

E E < 

PeIIIl<i<j<r 

E ^-Hs) 2 + E ^-p(^) 2 + E r ^p(9? < 

Pel z ' Pen ^ Pein z ' 



r — 1 
2r 



(2* - 2) 2 + (2 l Y(3£ - 3) + (2* + l)\£ - 1)(£ - 3)) . (15) 



Once again, the last inequality is thanks to the table with classification of 
singularities given in section 3 for £ \ 2 l — 1. If ( fT2i) > ( {TBI) then we have won. 
After canceling the factors of (r — l)/2r, the inequality (Tl2|) > ([TBI) is 

(27 - 2) 2 > (2* - 2) 2 + (2*) 2 (3£ - 3) + (2* + 1) 2 (£ 2 - 4£ + 3) 

which is true because it is exactly the same inequality as that in the proof of 
Lemma [Ml □ 



5.4 Proof of Conjecture 3' 



In this section we will finally prove Conjecture 3'. 

Theorem 16 If £ \ 2 l — \ but £ ^ 2 l — 1, then g t (x,y) always has an absolutely 
irreducible factor over ¥2. 

Proof: Suppose g t = fi ■ ■ ■ f r is the factorization into irreducible factors over 
F 2 . Let fk = fk,i ■ ■ ■ fk,n k be the factorization of fk into nk absolutely irre- 
ducible factors. Each f k j has degree deg(fk)/n k , by Lemma [TU1 
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Let us prove an auxiliary result. 

Lemma 17 All ¥ 2 -irreducible components f k (x,y) of g t (x,y) satisfy the fol- 
lowing conditions: 



deg(/ fc ) 2 < £ m P (f k ) 2 . (16) 

PeSing(gt) 

E m p(fk,i)mp{fk,j) < mp(f k ) 2 ^- . (17) 

l<i<j<n k AHk 

Proof: Applying Bezout's theorem to fk gives 

,n k - 1 



E E J ( P ' fk,i, fk,j) = E de s(fk,i) deg(f kd ) = deg(f 



2' 
k) - 



\<i<j<n k P£Sing(f k ) l<i<3<n k 

(18) 

Since for every i,j e {1, . . . ,n k } the tangent cones of f k ,i and f k j consist of 
different lines by Lemma HI the left hand side of (|T8l) is 

E E I(PJk,iJkj)= E E rn P {f k ^mp{f k j) (19) 

l<i<j<n fc PeSing(f k ) P&Sing(f k ) l<i<j<n k 

by Corollary [HJ We fix P a singular point. Applying Lemma [TT] to 

E mp(fk,i) m p(fk,j) 

subject to T2=x m p(fk,i) = rn P (f k ) we get that 

E m p{.fk,i)m P (f k)j ) < m P (/ t ) 2 ^ — - 



which proves (1171) . Summing over P then proves (1161) . □ 
Proof of Theorem I16t 

We apply Bezout's Theorem (equation (J4])) one more time to the product 

A/2 ■ ■ ■ fr = • • • /l,ni)(/2,l • • • /2,n 2 ) • • • (fr,l ■ ■ ■ fr,n r )- 

The sum of the intersection multiplicities (left hand side of equation (jl])) can 
be written 

£ E E nr..!),,]),,) ■ E E E HPJ^fu) 

k=l l<i<j<n k PeSing(gt) l<k<l<r l<i<n k PeSing(gt) 

l<i<n; 
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where the first term is for factors within each and the second term is for 
cross factors between /& and fa. Since for every k and % the tangent cones of 
the /fc i consist of different lines by Lemma HI the previous sums can be written 



E 

PeSmg(gt) 



Note that 



E E rnp(f k)i )mp(fk,j) + E E mp(fk,i)mp(fi,j) 

.k=l l<i<j<n k 



l<fc<Z<r l<i<n k 

l<i<7l; 



{mp(9t)) 2 = \ J2mp(fk)j 

r I "> 

= Y j mp(fk) 2 + 2[ E m p{fk)mp{fi) 



fe=i 



\l<k<l<r 



» k 



hi 



fc=l l<fc<Kr \i=l / V/=l 

r 

E m ^(/fc) 2 + 2 E E m p(fk,t) m p(fi,j)- 

k=l l<k<l<r l<i<n k 

l<j<n t 



Substituting, (J2Dj) becomes 



E 

PeSing(gt) 



1 



E E m p(fk,i) m p(fk,j) + ~ m p(gt) 2 - E 

.fe=l l<i<j'<n fe Z V fc=l 



Substituting ffTTI) this is 



(20) 



■ (21) 



< E E^/^^ + ^f^p^-E^) 2 

Pe Sing(gt) U=l Zr7,fc Z V 



fc=l 



E 



PeSing(g t ) 



2 mp/fc 

^p(^) -E— — 

fe=l 



(22) 
(23) 



On the other hand, the right-hand side of Bezout's Theorem (equation (J3])) is 



£ £ deg(/ w ) deg(/ fcj ) + £ E deg(/ M )deg(/ u ). (24) 



fc=i i<*<i< n fe 



l<fc<Kr l<i<ra fc 
l<i<n; 



Since each f^i has the same degree for all i, the first term is equal to 



E de §(A 



k=l 



rik — 1 1 

2ru 



o E deg(/,) 2 - 77 E 



1 A deg(/ fc ) s 



fc=i 



k=l 



n k 
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Note that 



(deg(g t )) 2 =(±deg(f k )) 



\k=l / 

= £deg(/ fc ) 2 + 2f £ deg(/ fc ) deg(/i)l 

fe=l \l<fc<Kr / 

r ( n k \ / n ; \ 

= Edeg(/ fc ) 2 + 2 E 5>g(/ M ) Edeg(/y) 

fe=l l<fc<Z<r\i=l / \j=l / 

= Edeg(/ fe ) 2 + 2 2 £ deg(/ w )deg(/y). 

fe=l Kfc<Kr KKn t 

Substituting both of these into (1211) shows that ( 1241) is equal to 

Comparing ( l25i) and ( 1231) . so far we have shown that Bezout's Theorem implies 
the following inequality: 



2 deg(/ fc ) 2 x ^ 
deg(^) - E ^ E 



fc=l nfc PeSing(gt) 



2 ,A rap(/i 

"»p(si) -E 



fc=i 



Finally, using ( 1T61) and Lemma [H] to compare both sides term by term, this 
is a contradiction. □ 



6 A Counterexample 



We have found with MAGMA pQ that t = 205 is a counterexample to Conjec- 
ture 3. In this case, g t (x, y) factors into two factors over F 2 . One of the factors 
is 

x 10 + x 9 y + x 9 + x 8 y 2 + x 8 y + x s + x 6 y 4 + x 6 y 3 + x 6 ?/ 2 + x 6 y + x 6 + x 5 y 5 + x 5 + 
x 4 ?/ 6 + x 4 y 4 + x 4 y 3 + x 4 y 2 + x 4 + x 3 y 6 + x 3 y 4 + x 3 y 3 + x 3 y + x 2 y 8 + x 2 y 6 + x 2 y 4 + 
x 2 y 2 + x 2 + xy 9 + xy 8 + xy 6 + xy 3 + xy + x + y 10 + y 9 + y 8 + y 6 + y 5 + y 4 + y 2 + ?/ + 1 

and the other factor has many more terms! Note in this case that i = 2 and 
£ = 51, so gcd(£, T - 1) = 3. In this case we have 1 < gcd(£, 2 i -!)<£. 
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